CVE-2011-2012

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote…

published October 12, 2011

CVSS

—

EPSS

17%

Percentile

97.0

In the wild

Unconfirmed

What it is

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka "Null Session Cookie Crash."

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.16588 · 97.0th percentile
Published: 2011-10-12T01:00Z

EPSS history

Timeline

12 OCT 01:00Z
Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote…
cvelistv5